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•- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

• Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )M Responsive to communication(s) filed on 01 October 2004 . 
2a)D This action is FINAL. 2b)E3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) E3 Claim(s) 1 1-23,34-46 and 57-105 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) M Claim(s) 77-23, 34-46. and 57-105 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
1 !)□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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2) Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5 ) D Notice of Informal Patent Application (PTO-1 52) 
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DETAILED ACTION 
Status of Claims 

1 . This action is in response to the amendment filed on 01 October 2004. 

2. Claims 1 1-23, 34-46, and 57-105 have been examined. 

Response to Arguments 

3. Applicants arguments received on 01 October 2004 have been fully considered but they are not 
persuasive. Referring to the previous Office action, Examiner has cited relevant portions of the 
references as a means to illustrate the systems as taught by the prior art. As a means of 
providing further clarification as to what is taught by the references used in the first Office action, 
Examiner has expanded the teachings for comprehensibility while maintaining the same grounds 
of rejection of the claims, except as noted above in the section labeled "Status of Claims." This 
information is intended to assist in illuminating the teachings of the references while providing 
evidence that establishes further support for the rejections of the claims. 

With regard to the limitations of claim 11, Applicant argues that neither Taylor nor 
Pressman teaches, discloses, or suggests at least determining a set of zero or more restrictions 
to be imposed on said customized implementations and instantiating a wrapper class to give rise 
to a wrapper instance, said wrapper instance comprising enforcement logic for enforcing said 
restrictions. However, the Applicant is merely stating rudimentary functionality of object-oriented 
programming and design. These features are inherent to any OOD system. The combinations of 
Taylor/Pressman as shown below clearly disclose object oriented programming, design, and 
applications, inherently and explicitly disclosing the argued features of the claimed invention. 
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Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains. Patentability shall not be negatived by the manner in which the invention 
was made. 

5. Claims 11, 12, 15, 18, 19, 34, 35, 38, 41, 42, 57, 58, 61, 64, 65, 70-80, 83-87, 92-96, and 101- 
105: are rejected under 35 U.S.C. 103(a) as being unpatentable over Taylor (Object-Oriented 
Information Systems (c) 1992), in view of Pressman (Software Engineering: A Practitioner's 
Approach (c) 1982-1997). 

Examiner's note: Examiner has pointed out particular references contained in the prior art of 
record in the body of this action for the convenience of the Applicant. Although the specified 
citations are representative of the teachings in the art and are applied to the specific limitations 
within the individual claim, other passages and figures may apply. Applicant, in preparing the 
response, should consider fully the entire reference as potentially teaching all or part of the 
claimed invention, as well as the context of the passage as taught by the prior art or disclosed by 
the Examiner. 

Claims 11, 12, 15, 34, 35, 38, 57, 58, and 61: 

With regard to the limitations of: 

• receiving a request from an application for a customized implementation 
of a particular service; 
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• instantiating an implementation class which provides an implementation 
for the particular service to give rise to an implementation instance; 

• determining a set of zero or more restrictions to be imposed on said 
customized implementation; 

• instantiating a wrapper class to give rise to a wrapper instance, said 
wrapper instance comprising enforcement logic for enforcing said 
restrictions; encapsulating said implementation instance and said 
restrictions within said, wrapper instance; 

• providing said wrapper instance to the application as said customized 
implementation; 

• wherein said wrapper instance comprises one or more invocable 
methods, wherein said implementation instance comprises one or more 
invocable methods, and wherein encapsulating comprises; and 

• mapping the one or more invocable methods of said wrapper instance to 
the one or more invocable methods of said implementation instance 

• determining whether the implementation class is authentic; and 

• in response to a determination that the implementation class is authentic, 
instantiating the implementation class to give rise to said implementation 
instance; 

• accessing information specifying one or more limitations; and 

• processing said limitations to derive said restrictions 

Taylor in at least chapter 1 of his textbook introduces fundamental object-oriented 
software technology mechanisms. In chapters.3 and 4 Taylor begins an in-depth teaching of the 
essentials in OOD/OOA technology, and further into the book, describes in detail techniques and 
procedures for programming in an object-oriented environment. The limitations contained within 
the claim language recite rudimentary characteristics and techniques that one of ordinary skill in 
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the object-oriented programming art would understand and accept as common knowledge in the 
industry. See also Taylor's discussion on encapsulation of legacy systems beginning on page 
296, which applies specifically to Applicant's wrapper instance of interfacing between various 
legacy encryption protocols currently in use. 

In addition, Pressman discloses object-oriented software engineering (pages 1-22 and 
549-576), which support the basic OOD/OOA concepts that are considered common knowledge 
to any college-level programmer in the computer programming arts. Since the Applicant appears 
to be merely claiming OOD/OOA programming concepts and principles, the cited references 
apply as a whole to the limitations of claims 11-23, 34-46, and 57-105. It would have been 
obvious to one of ordinary skill in the art at the time of the invention to combine Taylor and 
Pressman because these two textbooks teach the same programming techniques. 

Claims 18, 19, 41, 42, 64, and 65: 

With regard to the limitations of: 

• accessing information specifying one or more limitations; 

• determining permissions, if any, granted to the application; and 

• reconciling said limitations and said permissions to derive said 
restrictions. 

• said limitations and said permissions are reconciled to derive restrictions 
which are least restrictive. 

The combination of Taylor/Pressman discloses fundamental and intrinsic OOD/OOA 
concepts as shown above. 



Claims 70-80, 83-87, 92-96, 101-105: 

• determining said set of zero or more restrictions includes determining a 
set of zero or more restrictions that are specific to said application. 
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• determining said set of zero or more restrictions that are specific to said 
application includes determining a set of zero or more restrictions that 
are customized for said application. 

• said set is a first set f and wherein said customized implementation is a 
first customized implementation, and further comprising: 

• receiving a request from a second application for a second customized 
implementation of said particular service, wherein said second 
customized implementation differs from said first customized 
implementation; 

• instantiating said implementation class which provides said 
implementation for said particular service to give rise to a second 
implementation instance; 

• determining a second set of zero or more restrictions to be imposed on 
said second customized implementation, wherein said second set differs 
from said first set; 

• instantiating said wrapper class to give rise to a second wrapper 
instance, said second wrapper instance comprising enforcement logic for 
enforcing said second set of zero or more restrictions; 

• encapsulating said second implementation instance and said second set 
of zero or more restrictions within said second wrapper instance; and 

• providing said second wrapper instance to said second application as 
said second customized implementation. 

• said wrapper instance is invocable by the application without further 
interaction with the framework. 

• the implementation class provides an unrestricted implementation for the 
particular service. 
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• said enforcement logic enforces said restrictions on said implementation 
instance. 

• said enforcement logic enforces said restrictions on said implementation 
instance by: 

• receiving a set of desired parameters from the application; 

• determining whether the desired parameters exceed said restrictions; 
and 

• in response to a determination that the desired parameters exceed said 
restrictions, preventing said implementation instance from operating. 

• said enforcement logic is invoked upon initialization of said wrapper 
instance. 

• the system further comprises an exemption mechanism class which 
provides an implementation for a particular exemption mechanism, and 
wherein said method further comprises: 

• instantiating the exemption mechanism class to give rise to an exemption 
mechanism instance; and 

• encapsulating said exemption mechanism instance within said wrapper 
instance. 

• said enforcement logic is invoked upon initialization of said wrapper 
instance, and when invoked, said enforcement logic: determines whether 
said exemption mechanism instance has been invoked; and in response 
to a determination that said exemption mechanism instance has not 
been invoked, preventing said implementation instance from operating; 

The combination of Taylor/Pressman discloses fundamental and intrinsic OOD/OOA 
concepts as shown above. 
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6. Claims 13, 14, 16, 17, 20-23, 36, 37, 39, 40, 43-46, 59, 60, 62, 63, 66-69, 81, 82, 90, 91, 99, and 
100 are rejected under 35 U.S.C. 103(a) as being unpatentable over Taylor (Object-Oriented 
Information Systems (c) 1992), in view of Pressman (Software Engineering: A Practitioner's 
Approach (c) 1982-1997), and further in view of Shanton (US 5,369,702 A). 

Claims 13, 14, 16, 17, 36, 37, 39, 40, 59, 60, 62, and 63: 

The combination of Taylor/Pressman disclose fundamental and intrinsic OOD/OOA 
concepts as shown above, intrinsically disclosing: 

• determining whether the implementation class is authentic; and 

• the implementation class authenticates the framework prior to giving rise 
to said implementation instance; 

Taylor/Pressman do not disclose verifying said digital signature and the particular service 
is an encryption/decryption service. However, Shanton discloses encryption, decryption, and 
digital signatures in an OOD/OOA environment. It would have been obvious to one of ordinary 
skill in the art at the time of the invention to combine the OOD/OOA programming concepts and 
principles of Taylor/Pressman with Shanton's OOD/OOA security techniques because this 
increases "...the security of the system, while at the same time giving the individual user a large 
amount of flexibility and power" (Shanton, c4:14-16). 

With regard to the limitations of said information comprises a set of one or more default 
encryption limitations, and said default encryption limitations are derived by merging multiple 
jurisdiction policies and extracting therefrom the most restrictive encryption limitations, Taylor 
discloses interfacing with various legacy systems as shown above. 
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Claims 20-23, 43-46, and 66-69: 

With regard to the following limitations, the combination of Taylor/Pressman discloses 
fundamental and intrinsic OOD/OOA concepts as shown above. 

• determining whether the application has been granted any permissions; 
and 

• in response to a determination that the application has not been granted 
any permissions, deriving said restrictions from said set of default 
encryption limitations. 

• determining whether the application has been granted any permissions 
which require implementation of a particular exemption mechanism; 

• in response to a determination that the application has been granted a 
permission which requires implementation of a particular exemption 
mechanism, determining whether said exempt encryption limitations 
allow said particular exemption mechanism to be implemented; 

The combination of Taylor/Pressman does not disclose: 

• the particular service is an encryption/decryption sen/ice, and wherein 
said information comprises a set of one or more default encryption 
limitations, and a set of zero or more exempt encryption limitations which 
apply when one or more exemption mechanisms are implemented. 

• said default encryption limitations and said exempt encryption limitations 
are derived by merging multiple jurisdiction policies and extracting 
therefrom the most restrictive encryption limitations. 

• in response to a determination that said exempt encryption limitations 
allow said particular exemption mechanism to be implemented, deriving 
said restrictions from said set of exempt encryption limitations. 
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However, Shanton discloses encryption, decryption, and digital signatures in an 
OOD/OOA environment. It would have been obvious to one of ordinary skill in the art at the time 
of the invention to combine the OOD/OOA programming concepts and principles of 
Taylor/Pressman with Shanton's OOD/OOA security techniques because this increases "...the 
security of the system, while at the same time giving the individual user a large amount of 
flexibility and power" (Shanton, c4: 14-16). See also Taylor's discussion on encapsulation of 
legacy systems beginning on page 296, which applies specifically to Applicant's wrapper instance 
of interfacing between various legacy encryption protocols currently in use. 



Claims 81, 82, 90, 91, 99, and 100: 

The combination of Taylor/Pressman discloses fundamental and intrinsic OOD/OOA 
concepts as shown above. Taylor/Pressman do not disclose: 

• the particular service is an encryption/decryption service, 

• the unrestricted implementation provided by the implementation class is 
capable of using unlimited encryption/decryption parameters; and 

• the unrestricted implementation provided by the implementation class is 
capable of using encryption/decryption keys of any size. 

However, Shanton discloses encryption, decryption, and digital signatures in an 
OOD/OOA environment. It would have been obvious to one of ordinary skill in the art at the time 
of the invention to combine the OOD/OOA programming concepts and principles of 
Taylor/Pressman with Shanton's OOD/OOA security techniques because this increases "...the 
security of the system, while at the same time giving the individual user a large amount of 
flexibility and power" (Shanton, c4: 14-16). See also Taylor's discussion on encapsulation of 
legacy systems beginning on page 296, which applies specifically to Applicant's wrapper instance 
of interfacing between various legacy encryption protocols currently in use. 
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Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to James A. Reagan whose telephone number is (703) 306-9131. The 
examiner can normally be reached on Monday-Friday, 9:30am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James Trammell can be reached at (703) 305-9768. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the Receptionist whose telephone number is (703) 305-3900. Information 
regarding the status of an application may be obtained from the Patent Application Information 
Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available 
through Private PAIR only. For more information about the PAIR system, see 
http://portal.uspto.gov/external/portal/pair . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
Washington, D.C. 20231 

or faxed to: 

(703) 305-7687 [Official communications; including 
After Final communications labeled "Box AF"] 

(703) 308-1396 [Informal/Draft communications, labeled "PROPOSED" 
or "DRAFT"] 

Hand delivered responses should be brought to Crystal Park 5, 2451 Crystal Drive, 
Arlington, VA, 7 th floor receptionist. 
JAR 

22 October 2004 




